LastPass Customer Data Stolen in Klue Supply Chain Breach

LastPass confirmed that attackers who breached Klue stole OAuth tokens and used them to access LastPass’s Salesforce instance, exposing CRM contact details and support case data (names, emails, phone numbers, addresses). LastPass says customer vaults remain secure, has revoked Klue access and rotated tokens, and opened investigations with Klue, Salesforce, and law enforcement.